June Data Wrap: A Snapshot Of Key Regulatory Developments

A sneaky entry into the June data wrap given that it was actually announced on Monday 10 July, but the European Commission (the "Commission") has now adopted its adequacy decision for the EU-US Data Privacy Framework (the "Framework"). The decision means that personal data can now freely flow to organisations participating in the Framework without the need for transfer impact assessments or standard contractual clauses.

In its press release, Commission explained that the Framework introduces new binding safeguards to address concerns raised by the European Court of Justice ("CJEU") in the Schrems II case which invalidated the previous US adequacy decision (the EU-US Privacy Shield). However, Max Schrems and his non-profit organisation NOYB have already publicly stated that they have prepared the paperwork to help challenge the new regime and bring it before the CJEU for a third time. Their view is that the new Framework is largely a copy of the previous EU-US